Bureau Veritas 攜手勤業眾信 協助勤晁科技取得 IEC 62443-4-1 認證
共築產品安全治理新標竿 接軌 CRA 全球資安法規

隨著歐盟《Cyber Resilience Act（CRA）》及全球產品資安法規逐步進入強制實施階段，企業對產品安全治理能力的要求已提升至全新層次。如何將安全需求、風險分析、安全設計、安全測試及漏洞管理等機制導入產品開發生命週期（Secure Development Lifecycle, SDL），已成為企業提升產品安全成熟度、強化國際競爭力及接軌全球市場的重要關鍵。

Bureau Veritas（必維國際檢驗集團） 在2026年7月8日攜手 Deloitte（勤業眾信）與勤晁科技（Zyell Solutions）共同舉辦 「勤業眾信 × 勤晁科技 × Bureau Veritas IEC 62443-4-1 授證儀式」，見證勤晁科技成功取得 IEC 62443-4-1 Secure Product Development Lifecycle（產品安全開發流程） 國際認證。此次合作結合 Deloitte 在資安治理及 CRA 法規輔導的專業顧問服務，以及 Bureau Veritas 全球產品安全測試、檢驗與驗證能力，共同協助勤晁科技建立符合國際標準的安全開發流程，展現臺灣企業接軌全球產品資安規範的重要成果。

勤晁科技長期深耕工業資安、跨域安全及資料交換技術，致力於打造兼具安全性與可靠性的產品解決方案。本次成功取得 IEC 62443-4-1 認證，代表其已建立符合國際標準的安全開發流程，將資訊安全落實於產品設計、開發、驗證及維運各階段，不僅提升產品安全治理成熟度，也為未來因應 CRA 等全球產品資安法規奠定堅實基礎。
 

Bureau Veritas CPS科技產品事業線資訊安全協理薛正表示：
「IEC 62443-4-1 認證不僅驗證企業是否建立符合國際標準的安全開發流程，更代表企業具備持續推動產品安全治理的能力。隨著 CRA 等全球法規正式上路，產品安全已成為企業競爭力的重要指標。Bureau Veritas 將持續運用全球產品安全與資安驗證經驗，協助企業建立符合國際標準的安全開發體系，提升產品資安成熟度，加速布局全球市場。」

勤晁科技股份有限公司總經理廖朝暉表示：
「資安已不只是技術議題，更是企業競爭力的重要基礎。勤晁科技長期投入高安全等級的跨域安全與資料交換技術，我們相信真正的資安，不只是防護，更是建立客戶信任的根本。此次取得 IEC 62443-4-1 認證，是團隊持續精進產品安全能力的重要里程碑，也將持續以國際標準打造更安全、更值得信賴的產品與服務。」

勤業眾信科技與轉型服務資深執行副總經理簡宏偉表示：
「企業在導入安全開發流程的過程中，關鍵往往不在於盲目符合標準條文，而是能否將資安機制真正內化為產品開發的日常。勤業眾信以豐富的產業經驗，協助企業精準釐清現有流程與國際法規標準的差異，並結合產品特性與內部組織架構，建立兼具可行性與落地性的安全開發流程，進而確保各項安全活動具備一致性與可追溯性，真正落實以風險導向為核心的安全開發管理模式。」

面對持續演進的全球產品資安法規，Bureau Veritas 除提供 IEC 62443-4-1 產品安全開發流程驗證服務外，也持續協助企業導入 IEC 62443-4-2、IEC 62443 系列標準、prEN 40000-1-2、prEN 40000-1-3 等產品安全與 CRA 合規服務，協助企業從產品設計、安全開發、技術驗證到法規符合性，建立完整的產品安全治理能力。

未來，Bureau Veritas 將持續致力並攜手產業合作夥伴們，結合法規治理、產品安全驗證及國際標準專業，協助更多臺灣企業提升產品安全成熟度，接軌全球法規要求，共同打造更安全、更具韌性的產品資安生態系。

Bureau Veritas Supports Zyell Solutions in Achieving IEC 62443-4-1 Certification
Partnering with Deloitte to Strengthen Product Cybersecurity Governance and Help Taiwanese Enterprises Prepare for the EU Cyber Resilience Act (CRA)
 

As the European Union’s Cyber Resilience Act (CRA) and other global cybersecurity regulations move toward mandatory enforcement, product cybersecurity has become a critical factor in market competitiveness. Organizations are expected to integrate cybersecurity throughout the entire Secure Development Lifecycle (SDL), from security requirements and threat analysis to secure design, testing, vulnerability management, and maintenance.

Against this backdrop, Bureau Veritas, together with Deloitte Taiwan, jointly celebrated Zyell Solutions for successfully achieving IEC 62443-4-1 Secure Product Development Lifecycle Certification during the “Deloitte × Zyell Solutions × Bureau Veritas IEC 62443-4-1 Certification Ceremony” held on July 8, 2026.

The achievement demonstrates Zyell Solutions’ commitment to establishing a secure product development process aligned with international standards. Combining Deloitte’s expertise in cybersecurity governance and regulatory advisory with Bureau Veritas’ global capabilities in testing, inspection, certification and verification, the collaboration helps organizations strengthen product cybersecurity governance while preparing for evolving international regulatory requirements.

Zyell Solutions has long specialized in industrial cybersecurity, secure data exchange and cross-domain security technologies. By obtaining IEC 62443-4-1 certification, the company has demonstrated that cybersecurity has been embedded throughout its product development lifecycle—from security requirements and architecture design to software development, testing and vulnerability management—laying a solid foundation for compliance with future global cybersecurity regulations.
David Hsueh, Director of Cybersecurity, Bureau Veritas Consumer Products Services, said:
“IEC 62443-4-1 certification represents far more than compliance with an international standard. It demonstrates an organization’s ability to establish a mature and sustainable secure product development process. As regulations such as the EU Cyber Resilience Act continue to reshape the global marketplace, cybersecurity has become a key differentiator for product competitiveness. Bureau Veritas remains committed to helping manufacturers build internationally recognized secure development practices, improve cybersecurity maturity and accelerate access to global markets.”

Andy Liaw, General Manager of Zyell Solutions, said:
“Cybersecurity is no longer just a technical issue—it is an essential element of business competitiveness. Zyell Solutions has continuously invested in high-assurance cross-domain security and secure data exchange technologies because we believe cybersecurity is not only about protection, but also about building customer trust. Achieving IEC 62443-4-1 certification marks another important milestone in our commitment to delivering secure, reliable and internationally trusted products.”

Howard Jyan, the Partner of Technology & Transformation Service at Deloitte Taiwan added:
“When enterprises implement cybersecurity development processes, the key often lies not in blindly complying with standard requirements, but in genuinely integrating cybersecurity mechanisms into daily product development practices. Leveraging extensive industry experience, Deloitte helps enterprises precisely identify gaps between their current processes and international regulatory standards, and by combining product features with internal organizational structures, establishes secure development workflows that are both feasible and implementable. This ensures consistency and traceability across all security activities, and truly realizes a risk-driven secure development management model.”

Beyond IEC 62443-4-1 certification, Bureau Veritas continues to support manufacturers through a comprehensive portfolio of cybersecurity services, including IEC 62443-4-2, the IEC 62443 series, prEN 40000-1-2, prEN 40000-1-3, and Cyber Resilience Act (CRA) readiness assessments. These services help organizations establish comprehensive product cybersecurity governance from product design and secure development to technical validation and regulatory compliance.

Looking ahead, Bureau Veritas will continue working closely with Deloitte and industry partners to help Taiwanese enterprises strengthen cybersecurity governance, enhance product security maturity, comply with international regulations and improve global competitiveness, contributing to a more secure and resilient digital ecosystem.